---
- name: Create authentik directory
  ansible.builtin.file:
    path: "{{ authentik_dir }}"
    state: directory
    owner: root
    group: root
    mode: "0755"
  tags: [authentik]

- name: Deploy authentik Compose project
  ansible.builtin.include_role:
    name: compose_project
  vars:
    compose_project_dir: "{{ authentik_dir }}"
    compose_project_directories:
      - "{{ authentik_dir }}"
    compose_project_env_template_src: "{{ playbook_dir }}/../roles/authentik/templates/env.j2"
    compose_project_compose_template_src: "{{ playbook_dir }}/../roles/authentik/templates/compose.yaml.j2"
    compose_project_override_template_src: "{{ playbook_dir }}/../roles/authentik/templates/compose.override.yaml.j2"
    compose_project_create_proxy_network: "{{ authentik_routing_mode == 'traefik' }}"
    compose_project_proxy_network: "{{ authentik_traefik_network }}"
    compose_project_firewall_ports: "{{ authentik_tcp_ports }}"
    compose_project_firewall_enabled: "{{ authentik_routing_mode in ['host', 'traefik_file'] }}"
  tags: [authentik]